TNS SUBSCRIBE Join our community of software engineering leaders and aspirational developers. Always stay in-the-know by getting the most important news and exclusive content delivered fresh to your inbox to learn more about at-scale software development. EMAIL ADDRESS REQUIRED RESUBSCRIPTION REQUIRED It seems that you've previously unsubscribed from our newsletter in the past. Click the button below to open the re-subscribe form in a new tab. When you're done, simply close that tab and continue with this form to complete your subscription. The New Stack does not sell your information or share it with unaffiliated third parties. By continuing, you agree to our [Terms of Use](/terms-of-use/) and [Privacy Policy](/privacy-policy/). Welcome and thank you for joining The New Stack community! Please answer a few simple questions to help us deliver the news and resources you are interested in. FIRST NAME REQUIRED LAST NAME REQUIRED COMPANY NAME REQUIRED COUNTRY REQUIRED Select ... United States Canada India United Kingdom Germany France --- Afghanistan Albania Algeria American Samoa Andorra Angola Anguilla Antarctica Antigua and Barbuda Argentina Armenia Aruba Asia/Pacific Region Australia Austria Azerbaijan Bahamas Bahrain Bangladesh Barbados Belarus Belgium Belize Benin Bermuda Bhutan Bolivia Bonaire, Sint Eustatius and Saba Bosnia and Herzegovina Botswana Bouvet Island Brazil British Indian Ocean Territory Brunei Darussalam Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Cocos (Keeling) Islands Colombia Comoros Congo Congo, The Democratic Republic of the Cook Islands Costa Rica Croatia Cuba Curaçao Cyprus Czech Republic Côte d'Ivoire Denmark Djibouti Dominica Dominican Republic Ecuador Egypt El Salvador Equatorial Guinea Eritrea Estonia Ethiopia Falkland Islands (Malvinas) Faroe Islands Fiji Finland France French Guiana French Polynesia French Southern Territories Gabon Gambia Georgia Germany Ghana Gibraltar Greece Greenland Grenada Guadeloupe Guam Guatemala Guernsey Guinea Guinea-Bissau Guyana Haiti Heard Island and Mcdonald Islands Holy See (Vatican City State) Honduras Hong Kong Hungary Iceland India Indonesia Iran, Islamic Republic Of Iraq Ireland Isle of Man Israel Italy Jamaica Japan Jersey Jordan Kazakhstan Kenya Kiribati Korea, Republic of Kuwait Kyrgyzstan Laos Latvia Lebanon Lesotho Liberia Libyan Arab Jamahiriya Liechtenstein Lithuania Luxembourg Macao Madagascar Malawi Malaysia Maldives Mali Malta Marshall Islands Martinique Mauritania Mauritius Mayotte Mexico Micronesia, Federated States of Moldova, Republic of Monaco Mongolia Montenegro Montserrat Morocco Mozambique Myanmar Namibia Nauru Nepal Netherlands Netherlands Antilles New Caledonia New Zealand Nicaragua Niger Nigeria Niue Norfolk Island North Korea North Macedonia Northern Mariana Islands Norway Oman Pakistan Palau Palestinian Territory, Occupied Panama Papua New Guinea Paraguay Peru Philippines Pitcairn Islands Poland Portugal Puerto Rico Qatar Reunion Romania Russian Federation Rwanda Saint Barthélemy Saint Helena Saint Kitts and Nevis Saint Lucia Saint Martin Saint Martin Saint Pierre and Miquelon Saint Vincent and the Grenadines Samoa San Marino Sao Tome and Principe Saudi Arabia Senegal Serbia Serbia and Montenegro Seychelles Sierra Leone Singapore Sint Maarten Slovakia Slovenia Solomon Islands Somalia South Africa South Georgia and the South Sandwich Islands South Sudan Spain Sri Lanka Sudan Suriname Svalbard and Jan Mayen Swaziland Sweden Switzerland Syrian Arab Republic Taiwan Tajikistan Tanzania, United Republic of Thailand Timor-Leste Togo Tokelau Tonga Trinidad and Tobago Tunisia Turkey Turkmenistan Turks and Caicos Islands Tuvalu Uganda Ukraine United Arab Emirates United Kingdom United States United States Minor Outlying Islands Uruguay Uzbekistan Vanuatu Venezuela Vietnam Virgin Islands, British Virgin Islands, U.S. Wallis and Futuna Western Sahara Yemen Zambia Zimbabwe Åland Islands ZIPCODE REQUIRED Great to meet you! Tell us a bit about your job so we can cover the topics you find most relevant. What is your job level? REQUIRED Select ... C-Level VP/Director Manager/Supervisor Mid Level or Senior Non-Managerial Staff Entry Level/Junior Staff Freelancer/Contractor Student/Intern Other ... Which of these most closely describes your job role? REQUIRED Select ... Developer/Software Engineer SysAdmin/Operations/SRE Architect Security Professional DevOps Engineer/Team Community Manager/Developer Advocate IT management, including CIO/CISO/CTO Business Development/Marketing/Sales Enthusiast/Hobbyist Other ... How many employees are in the organization you work with? REQUIRED Select ... Self-employed 2-10 11-50 51-250 251-1,000 1,001-10,000 > 10,000 I am not working What option best describes the type of organization you work for? REQUIRED Select ... “End user” organization that primarily uses IT products and services to support their business deliverables Hardware / software vendor or supplier Cloud service provider or managed service provider System integrator or IT consulting firm Other ... Which of the following best describes your organization's primary industry? REQUIRED Select ... Advertising/Marketing Aerospace/Aviation Agriculture Automotive Biotech/Pharmaceutical Business Services (accounting, consulting, etc.) Computers/Information Technology Construction Education Facilities/Service Industry Finance/Financial Services (banking, insurance, etc.) Government Healthcare Human Resources Legal Life sciences (biotech, pharmaceuticals, etc.) Manufacturing Media Non-profit Real Estate Retail/Consumer Goods Telecommunications Transportation/Logistics Travel/Hospitality/Entertainment Utility/Energy Other ... LINKEDIN PROFILE URL Welcome! We’re so glad you’re here. You can expect all the best TNS content to arrive Monday through Friday to keep you on top of the news and at the top of your game. What’s next? Check your inbox for a confirmation email where you can adjust your preferences and even join additional groups. Follow TNS on your favorite social media networks. Become a [TNS follower on LinkedIn](https://www.linkedin.com/company/the-new-stack). Check out [the latest featured and trending stories](/) while you wait for your first TNS newsletter. PREV 1 of 2 NEXT VOXPOP As a JavaScript developer, what non-React tools do you use most often? ✓ Angular 0% ✓ Astro 0% ✓ Svelte 0% ✓ Vue.js 0% ✓ Other 0% ✓ I only use React 0% ✓ I don't use JavaScript 0% Thanks for your opinion! Subscribe below to get the final results, published exclusively in our TNS Update newsletter: NEW! Try Stackie AI ARCHITECTURE [Cloud Native Ecosystem](https://thenewstack.io/cloud-native/) [Containers](https://thenewstack.io/containers/) [Databases](https://thenewstack.io/databases/) [Edge Computing](https://thenewstack.io/edge-computing/) [Infrastructure as Code](https://thenewstack.io/infrastructure-as-code/) [Linux](https://thenewstack.io/linux/) [Microservices](https://thenewstack.io/microservices/) [Open Source](https://thenewstack.io/open-source/) [Networking](https://thenewstack.io/networking/) [Storage](https://thenewstack.io/storage/) ENGINEERING [AI](https://thenewstack.io/ai/) [AI Engineering](https://thenewstack.io/ai-engineering/) [API Management](https://thenewstack.io/api-management/) [Backend development](https://thenewstack.io/backend-development/) [Data](https://thenewstack.io/data/) [Frontend Development](https://thenewstack.io/frontend-development/) [Large Language Models](https://thenewstack.io/llm/) [Security](https://thenewstack.io/security/) [Software Development](https://thenewstack.io/software-development/) [WebAssembly](https://thenewstack.io/webassembly/) OPERATIONS [AI Operations](https://thenewstack.io/ai-operations/) [CI/CD](https://thenewstack.io/ci-cd/) [Cloud Services](https://thenewstack.io/cloud-services/) [DevOps](https://thenewstack.io/devops/) [Kubernetes](https://thenewstack.io/kubernetes/) [Observability](https://thenewstack.io/observability/) [Operations](https://thenewstack.io/operations/) [Platform Engineering](https://thenewstack.io/platform-engineering/) PROGRAMMING [C++](https://thenewstack.io/c/) [Developer tools](https://thenewstack.io/developer-tools/) [Go](https://thenewstack.io/go/) [Java](https://thenewstack.io/java/) [JavaScript](https://thenewstack.io/javascript/) [Programming Languages](https://thenewstack.io/programming-languages/) [Python](https://thenewstack.io/python/) [Rust](https://thenewstack.io/rust/) [TypeScript](https://thenewstack.io/typescript/) CHANNELS [Podcasts](https://thenewstack.io/podcasts/) [Ebooks](https://thenewstack.io/ebooks/) [Events](https://thenewstack.io/events/) [Webinars](https://thenewstack.io/webinars/) [Newsletter](https://thenewstack.io/newsletter/) [TNS RSS Feeds](/rss-feeds/) THE NEW STACK [About / Contact](https://thenewstack.io/about-and-contact-info/) [Sponsors](https://thenewstack.io/sponsors/) [Advertise With Us](https://thenewstack.io/sponsorship/) [Contributions](https://thenewstack.io/contributions/) [PODCASTS](/podcasts/) [EBOOKS](/ebooks/) [EVENTS](/events/) [WEBINARS](/webinars/) [NEWSLETTER](/newsletter/) [CONTRIBUTE](/contributions/) [ARCHITECTURE](#) [ENGINEERING](#) [OPERATIONS](#) [PROGRAMMING](#) [Cloud Native Ecosystem](https://thenewstack.io/cloud-native/) [Containers](https://thenewstack.io/containers/) [Databases](https://thenewstack.io/databases/) [Edge Computing](https://thenewstack.io/edge-computing/) [Infrastructure as Code](https://thenewstack.io/infrastructure-as-code/) [Linux](https://thenewstack.io/linux/) [Microservices](https://thenewstack.io/microservices/) [Open Source](https://thenewstack.io/open-source/) [Networking](https://thenewstack.io/networking/) [Storage](https://thenewstack.io/storage/) [pg\_lake comes to Snowflake Postgres: What it means for open standards Feb 6th 2026 1:00am, by Jelani Harper](/pg_lake-comes-to-snowflake-postgres-what-it-means-for-open-standards/) [CNCF: Kubernetes is 'foundational' infrastructure for AI Jan 23rd 2026 11:00am, by Steven J. Vaughan-Nichols](/cncf-kubernetes-is-foundational-infrastructure-for-ai/) [CTO Chris Aniszczyk on the CNCF push for AI interoperability Jan 22nd 2026 1:00pm, by Loraine Lawson](/cto-chris-aniszczyk-on-the-cncf-push-for-ai-interoperability/) [CNCF Dragonfly Speeds Container, Model Sharing with P2P Jan 16th 2026 6:15am, by Joab Jackson](/cncf-dragonfly-speeds-container-model-sharing-with-p2p/) [Why Decoupling Control and Data Planes Is the Future of SaaS Dec 29th 2025 8:00am, by Hugo Guerrero](/why-decoupling-control-and-data-planes-is-the-future-of-saas/) [Bluefin Linux: ChromeOS simplicity meets Linux power Feb 11th 2026 12:00pm, by Jack Wallen](/bluefin-linux-chromeos-simplicity-meets-linux-power/) [The hunt for truly zero-CVE container images Feb 10th 2026 11:30am, by Steven J. Vaughan-Nichols](/the-hunt-for-truly-zero-cve-container-images/) [Chainguard's AI-powered factory hits 500 million builds Feb 9th 2026 7:19am, by Darryl K. Taft](/chainguard-500-million-builds/) [Docker versus Nix: The quest for true reproducibility Feb 7th 2026 10:00am, by B. Cameron Gain](/docker-versus-nix-the-quest-for-true-reproducibility/) [How Homepage simplifies monitoring your self-hosted services Feb 6th 2026 8:00am, by Jack Wallen](/how-homepage-simplifies-monitoring-your-self-hosted-services/) [The hidden reason database debt is ten times harder to fix than code Feb 12th 2026 7:00am, by Wen Jie Teo](/managing-database-debt/) [ShareChat hit a billion features per second, then it had to make it 10x cheaper Feb 12th 2026 6:00am, by Cynthia Dunlop](/scylladb-database-sharechat/) [TiDB and the rise of the AI-native database Feb 10th 2026 7:00am, by Ed Huang](/tidb-and-the-rise-of-the-ai-native-database/) [pg\_lake comes to Snowflake Postgres: What it means for open standards Feb 6th 2026 1:00am, by Jelani Harper](/pg_lake-comes-to-snowflake-postgres-what-it-means-for-open-standards/) [Open source USearch library jumpstarts ScyllaDB vector search Feb 5th 2026 12:00pm, by Jelani Harper](/open-source-usearch-library-jumpstarts-scylladb-vector-search/) [React Server Components Vulnerability Found Dec 6th 2025 7:00am, by Loraine Lawson](/react-server-components-vulnerability-found/) [Kubernetes at the Edge: Lessons From GE HealthCare’s Edge Strategy Nov 24th 2025 10:00am, by Vicki Walker](/kubernetes-at-the-edge-lessons-from-ge-healthcares-edge-strategy/) [Building a Cloud-to-Edge Architecture Across 40K Global Locations Nov 20th 2025 10:00am, by Vicki Walker](/building-a-cloud-to-edge-architecture-across-40k-global-locations/) [The AI Inflection Point Isn't in the Cloud, It's at the Edge Oct 26th 2025 8:00am, by Alex Williams](/the-ai-inflection-point-isnt-in-the-cloud-its-at-the-edge/) [Right-Sizing AI for the Edge: Power, Models and Security Oct 9th 2025 10:00am, by Chris J. Preimesberger](/right-sizing-ai-for-the-edge-power-models-and-security/) [Why 40% of AI projects will be canceled by 2027 (and how to stay in the other 60%) Feb 13th 2026 6:00am, by Alex Drag](/agentic-ai-connectivity-platform/) [Durable Execution: Build reliable software in an unreliable world Feb 2nd 2026 3:23pm, by Charles Humble](/temporal-durable-execution-platform/) [Terraform challenger Formae expands to more clouds Jan 28th 2026 6:00am, by Joab Jackson](/terraform-competitor-formae-expands-to-more-clouds/) [IBM HashiCorp 'Sunsets' Terraform's External Language Support Dec 12th 2025 2:00pm, by Joab Jackson](/ibm-hashicorp-sunsets-terraforms-external-language-support/) [Spacelift Scales Legacy Automation: Terraform First, Ansible Next Nov 24th 2025 6:00am, by Joab Jackson](/spacelift-scales-legacy-automation-terraform-first-ansible-next/) [HackerOS is what a Linux enthusiast's OS should be Feb 14th 2026 8:00am, by Jack Wallen](/hackeros-is-what-a-linux-enthusiasts-os-should-be/) [Bluefin Linux: ChromeOS simplicity meets Linux power Feb 11th 2026 12:00pm, by Jack Wallen](/bluefin-linux-chromeos-simplicity-meets-linux-power/) [The hunt for truly zero-CVE container images Feb 10th 2026 11:30am, by Steven J. Vaughan-Nichols](/the-hunt-for-truly-zero-cve-container-images/) [Why enterprise businesses should adopt immutable Linux for the desktop Feb 2nd 2026 1:25pm, by Jack Wallen](/why-enterprise-businesses-should-adopt-immutable-linux-for-the-desktop/) [Liya Linux proves high performance doesn’t require a command line Feb 1st 2026 7:00am, by Jack Wallen](/liya-linux-proves-high-performance-doesnt-require-a-command-line/) [Merging To Test Is Killing Your Microservices Velocity Dec 16th 2025 7:00am, by Arjun Iyer](/merging-to-test-is-killing-your-microservices-velocity/) [IBM’s Confluent Acquisition Is About Event-Driven AI Dec 11th 2025 6:00am, by Joab Jackson](/ibms-confluent-acquisition-is-about-event-driven-ai/) [Deploy Agentic AI Workflows With Kubernetes and Terraform Nov 26th 2025 9:00am, by Oladimeji Sowole](/deploy-agentic-ai-workflows-with-kubernetes-and-terraform/) [How Dapr and WebAssembly Team Up for Microservices Oct 2nd 2025 6:00am, by B. Cameron Gain](/how-dapr-and-webassembly-team-up-for-microservices/) [Your CI/CD Pipeline Wasn't Built for Microservices Aug 7th 2025 7:00am, by Arjun Iyer](/your-ci-cd-pipeline-wasnt-built-for-microservices/) [cURL’s Daniel Stenberg: AI slop is DDoSing open source Feb 15th 2026 10:00am, by Steven J. Vaughan-Nichols](/curls-daniel-stenberg-ai-slop-is-ddosing-open-source/) [How to ground AI agents in accurate, context-rich data Feb 13th 2026 5:00am, by Todd R. Weiss](/ai-agents-search-context/) [Is open source in trouble? Feb 9th 2026 11:00am, by B. Cameron Gain](/is-open-source-in-trouble/) [pg\_lake comes to Snowflake Postgres: What it means for open standards Feb 6th 2026 1:00am, by Jelani Harper](/pg_lake-comes-to-snowflake-postgres-what-it-means-for-open-standards/) [Open source USearch library jumpstarts ScyllaDB vector search Feb 5th 2026 12:00pm, by Jelani Harper](/open-source-usearch-library-jumpstarts-scylladb-vector-search/) [How Homepage simplifies monitoring your self-hosted services Feb 6th 2026 8:00am, by Jack Wallen](/how-homepage-simplifies-monitoring-your-self-hosted-services/) [S3 is the new network: Rethinking data architecture for the cloud era Feb 2nd 2026 4:00am, by Max Liu](/tidb-x-open-source-database/) [Cisco is using eBPF to rethink firewalls, vulnerability mitigation Jan 26th 2026 9:00am, by Joab Jackson](/with-ebpf-cisco-is-rethinking-firewalls-vulnerability-mitigation/) [You Might Not Know This, but Your NAS Might Be a Good Docker Server Jan 16th 2026 10:00am, by Jack Wallen](/you-might-not-know-this-but-your-nas-might-be-a-good-docker-server/) [CNCF Dragonfly Speeds Container, Model Sharing with P2P Jan 16th 2026 6:15am, by Joab Jackson](/cncf-dragonfly-speeds-container-model-sharing-with-p2p/) [S3 is the new network: Rethinking data architecture for the cloud era Feb 2nd 2026 4:00am, by Max Liu](/tidb-x-open-source-database/) [Agoda’s secret to 50x scale: Getting the database basics right Jan 28th 2026 7:00am, by Cynthia Dunlop](/agodas-secret-to-50x-scale-getting-the-database-basics-right/) [Chainguard EmeritOSS backs MinIO, other orphaned projects Jan 27th 2026 6:15am, by Steven J. Vaughan-Nichols](/chainguard-emeritoss-backs-minio-other-orphaned-projects/) [You Might Not Know This, but Your NAS Might Be a Good Docker Server Jan 16th 2026 10:00am, by Jack Wallen](/you-might-not-know-this-but-your-nas-might-be-a-good-docker-server/) [Is Sloppy File Sharing Endangering Your Enterprise? Jan 14th 2026 8:00am, by Vicki Walker](/is-sloppy-file-sharing-endangering-your-enterprise/) [AI](https://thenewstack.io/ai/) [AI Engineering](https://thenewstack.io/ai-engineering/) [API Management](https://thenewstack.io/api-management/) [Backend development](https://thenewstack.io/backend-development/) [Data](https://thenewstack.io/data/) [Frontend Development](https://thenewstack.io/frontend-development/) [Large Language Models](https://thenewstack.io/llm/) [Security](https://thenewstack.io/security/) [Software Development](https://thenewstack.io/software-development/) [WebAssembly](https://thenewstack.io/webassembly/) [cURL’s Daniel Stenberg: AI slop is DDoSing open source](/curls-daniel-stenberg-ai-slop-is-ddosing-open-source/) Feb 15th 2026 10:00am, by [Steven J. Vaughan-Nichols](https://thenewstack.io/author/sjvn/) [OpenClaw is being called a security “Dumpster fire,” but there is a way to stay safe](/deno-sandbox-security-secrets/) Feb 15th 2026 7:00am, by [David Eastman](https://thenewstack.io/author/david-eastman/) [Arcjet reaches v1.0, promises stable security for JavaScript apps](/arcjet-reaches-v1-0-promises-stable-security-for-javascript-apps/) Feb 14th 2026 7:00am, by [Darryl K. Taft](https://thenewstack.io/author/darryl-taft/) [GitHub's Agentic Workflows bring "continuous AI" into the CI/CD loop](/github-agentic-workflows-overview/) Feb 13th 2026 6:00am, by [Frederic Lardinois](https://thenewstack.io/author/frederic-lardinois/) [OpenAI's new Codex Spark model is built for speed](/openais-new-codex-spark-model-is-optimized-for-speed/) Feb 12th 2026 10:00am, by [Frederic Lardinois](https://thenewstack.io/author/frederic-lardinois/) [Your RAG System is probably image-blind, but it doesn't have to be](/multimodal-rag-hybrid-search/) Feb 12th 2026 12:00pm, by [Tushar Madaan](https://thenewstack.io/author/tushar-madaan/) and [Kiran Matty](https://thenewstack.io/author/kiran-matty/) [VS Code becomes multi-agent command center for developers](/vs-code-becomes-multi-agent-command-center-for-developers/) Feb 12th 2026 10:38am, by [Darryl K. Taft](https://thenewstack.io/author/darryl-taft/) [You can’t fire a bot: The blunt truth about AI slop and your job](/matan-paul-shetrit-interview/) Feb 11th 2026 3:17pm, by [Nick Lucchesi](https://thenewstack.io/author/nick-lucchesi/) [62% of enterprises now use Java to power AI apps](/2026-java-ai-apps/) Feb 10th 2026 12:58pm, by [Darryl K. Taft](https://thenewstack.io/author/darryl-taft/) [TiDB and the rise of the AI-native database](/tidb-and-the-rise-of-the-ai-native-database/) Feb 10th 2026 7:00am, by [Ed Huang](https://thenewstack.io/author/ed-huang/) [Solving the Problems That Accompany API Sprawl With AI](/solving-the-problems-that-accompany-api-sprawl-with-ai/) Jan 15th 2026 1:00pm, by [Heather Joslyn](https://thenewstack.io/author/hjoslyn/) [4 Core Principles for Scaling Your API Engineering Practice](/4-core-principles-for-scaling-your-api-engineering-practice/) Jan 13th 2026 10:00am, by [Matthias Biehl](https://thenewstack.io/author/matthias-biehl/) [Map Your API Landscape To Prevent Agentic AI Disaster](/map-your-api-landscape-to-prevent-agentic-ai-disaster/) Jan 12th 2026 12:00pm, by [Charles Humble](https://thenewstack.io/author/charles-humble/) [Postman Adds Open Source Documentation and SDK Products](/postman-adds-open-source-documentation-and-sdk-products/) Jan 10th 2026 5:00am, by [Loraine Lawson](https://thenewstack.io/author/loraine-lawson/) [Why Most APIs Fail in AI Systems and How To Fix It](/why-most-apis-fail-in-ai-systems-and-how-to-fix-it/) Jan 8th 2026 10:00am, by [Frank Kilcommins](https://thenewstack.io/author/frankkilcommins/) [How To Get DNS Right: A Guide to Common Failure Modes](/how-to-get-dns-right-a-guide-to-common-failure-modes/) Dec 24th 2025 8:00am, by [Sheldon Pereira](https://thenewstack.io/author/sheldon-pereira/) and [Denton Chikura](https://thenewstack.io/author/denton-chikura/) [Combining Rust and Python for High-Performance AI Systems](/combining-rust-and-python-for-high-performance-ai-systems/) Dec 3rd 2025 1:00pm, by [Zziwa Raymond Ian](https://thenewstack.io/author/zziwa-raymond/) [How MCP Uses Streamable HTTP for Real-Time AI Tool Interaction](/how-mcp-uses-streamable-http-for-real-time-ai-tool-interaction/) Aug 18th 2025 10:34am, by [Janakiram MSV](https://thenewstack.io/author/janakiram/) [A Backend for Frontend: Watt for Node.js Simplifies Operations](/a-backend-for-frontend-watt-for-node-js-simplifies-operations/) Aug 14th 2025 6:00am, by [Loraine Lawson](https://thenewstack.io/author/loraine-lawson/) [Human-on-the-Loop: The New AI Control Model That Actually Works](/human-on-the-loop-the-new-ai-control-model-that-actually-works/) Aug 4th 2025 8:00am, by [Steve Wilson](https://thenewstack.io/author/steve-wilson/) [How to ground AI agents in accurate, context-rich data](/ai-agents-search-context/) Feb 13th 2026 5:00am, by [Todd R. Weiss](https://thenewstack.io/author/todd-r-weiss/) [ShareChat hit a billion features per second, then it had to make it 10x cheaper](/scylladb-database-sharechat/) Feb 12th 2026 6:00am, by [Cynthia Dunlop](https://thenewstack.io/author/cynthiadunlop/) [Unlocking AI's full potential: Why context is everything](/context-is-everything-sales-force-data-360/) Feb 2nd 2026 2:31pm, by [Rahul Auradkar](https://thenewstack.io/author/rahul-auradkar/) [Meet Gravitino, a geo-distributed, federated metadata lake](/meet-gravitino-a-geo-distributed-federated-metadata-lake/) Jan 29th 2026 11:25am, by [Heather Joslyn](https://thenewstack.io/author/hjoslyn/) [Visual inspection finds the stories hidden in your charts](/art-of-visual-inspection-spot-the-hidden-story-in-your-charts/) Jan 25th 2026 8:00am, by [Joab Jackson](https://thenewstack.io/author/joab/) [The shift left hangover: Why modern platforms are shifting down to cure developer fatigue](/shift-left-hangover-steve-corndell/) Jan 30th 2026 6:22pm, by [Steve Corndell](https://thenewstack.io/author/steve-corndell/) [Mastra empowers web devs to build AI agents in TypeScript](/mastra-empowers-web-devs-to-build-ai-agents-in-typescript/) Jan 28th 2026 11:00am, by [Loraine Lawson](https://thenewstack.io/author/loraine-lawson/) [Drupal turns 25: From simple to complex — then simple again](/drupal-turns-25-from-simple-to-complex-then-simple-again/) Jan 28th 2026 8:00am, by [Richard MacManus](https://thenewstack.io/author/richard/) [Anthropic extends MCP with a UI framework](/anthropic-extends-mcp-with-an-app-framework/) Jan 26th 2026 10:00am, by [Frederic Lardinois](https://thenewstack.io/author/frederic-lardinois/) [Distributed apps platform Aspire supports JavaScript, Python](/distributed-apps-platform-aspire-supports-javascript-python/) Jan 24th 2026 9:00am, by [Loraine Lawson](https://thenewstack.io/author/loraine-lawson/) [Prompting vs. RAG vs. fine-tuning: Why it’s not a ladder](/prompting-vs-rag-vs-fine-tuning-why-its-not-a-ladder/) Jan 29th 2026 10:00am, by [Ibrahim Kamal](https://thenewstack.io/author/ibrahim-kamal/) [LLMs create a new blind spot in observability](/llms-create-a-new-blind-spot-in-observability/) Jan 24th 2026 10:00am, by [Shahar Azulay](https://thenewstack.io/author/shaharazulay/) [Focus on ‘Don’ts’ to build systems that know when to say ‘No’](/focus-on-donts-to-build-systems-that-know-when-to-say-no/) Jan 21st 2026 8:00am, by [AJ Sunder](https://thenewstack.io/author/aj-sunder/) [A Developer’s Guide to Marshaling Data With JSON](/a-developers-guide-to-marshaling-data-with-json/) Jan 17th 2026 5:00am, by [David Eastman](https://thenewstack.io/author/david-eastman/) [SLMs vs. LLMs: Why Smaller AI Models Win in Business](/slms-vs-llms-why-smaller-ai-models-win-in-business/) Jan 16th 2026 9:00am, by [Sean Falconer](https://thenewstack.io/author/sean-falconer/) [cURL’s Daniel Stenberg: AI slop is DDoSing open source](/curls-daniel-stenberg-ai-slop-is-ddosing-open-source/) Feb 15th 2026 10:00am, by [Steven J. Vaughan-Nichols](https://thenewstack.io/author/sjvn/) [HackerOS is what a Linux enthusiast's OS should be](/hackeros-is-what-a-linux-enthusiasts-os-should-be/) Feb 14th 2026 8:00am, by [Jack Wallen](https://thenewstack.io/author/jack-wallen/) [Arcjet reaches v1.0, promises stable security for JavaScript apps](/arcjet-reaches-v1-0-promises-stable-security-for-javascript-apps/) Feb 14th 2026 7:00am, by [Darryl K. Taft](https://thenewstack.io/author/darryl-taft/) [The hunt for truly zero-CVE container images](/the-hunt-for-truly-zero-cve-container-images/) Feb 10th 2026 11:30am, by [Steven J. Vaughan-Nichols](https://thenewstack.io/author/sjvn/) [The RISC architecture frontier: Is eBPF ready for ARM64 and RISC-V?](/the-risc-architecture-frontier-is-ebpf-ready-for-arm64-and-risc-v/) Feb 10th 2026 11:00am, by [B. Cameron Gain](https://thenewstack.io/author/bruce-gain/) [cURL’s Daniel Stenberg: AI slop is DDoSing open source](/curls-daniel-stenberg-ai-slop-is-ddosing-open-source/) Feb 15th 2026 10:00am, by [Steven J. Vaughan-Nichols](https://thenewstack.io/author/sjvn/) [Statistical language R is making a comeback against Python](/statistical-language-r-is-making-a-comeback-against-python/) Feb 12th 2026 2:57pm, by [Darryl K. Taft](https://thenewstack.io/author/darryl-taft/) [Is open source in trouble?](/is-open-source-in-trouble/) Feb 9th 2026 11:00am, by [B. Cameron Gain](https://thenewstack.io/author/bruce-gain/) [Chainguard's AI-powered factory hits 500 million builds](/chainguard-500-million-builds/) Feb 9th 2026 7:19am, by [Darryl K. Taft](https://thenewstack.io/author/darryl-taft/) [How AI coding makes developers 56% faster and 19% slower](/how-ai-coding-makes-developers-56-faster-and-19-slower/) Feb 9th 2026 4:00am, by [Steve Fenton](https://thenewstack.io/author/steve-fenton/) [How WebAssembly and Web Workers prevent UI freezes](/how-webassembly-and-web-workers-prevent-ui-freezes/) Feb 7th 2026 9:00am, by [Jessica Wachtel](https://thenewstack.io/author/jessica-wachtel/) [WebAssembly vs. JavaScript: Testing Side-by-Side Performance](/webassembly-vs-javascript-testing-side-by-side-performance/) Jan 20th 2026 9:00am, by [Jessica Wachtel](https://thenewstack.io/author/jessica-wachtel/) [Open Source Whamm: Use WebAssembly To Monitor and Fix Running Apps](/open-source-whamm-use-webassembly-to-monitor-and-fix-running-apps/) Jan 14th 2026 1:00pm, by [B. Cameron Gain](https://thenewstack.io/author/bruce-gain/) [WASI 1.0: You Won't Know When WebAssembly Is Everywhere in 2026](/wasi-1-0-you-wont-know-when-webassembly-is-everywhere-in-2026/) Jan 5th 2026 11:00am, by [B. Cameron Gain](https://thenewstack.io/author/bruce-gain/) [Run Real Python in Browsers With Pyodide and WebAssembly](/run-real-python-in-browsers-with-pyodide-and-webassembly/) Dec 30th 2025 3:30pm, by [Jessica Wachtel](https://thenewstack.io/author/jessica-wachtel/) [AI Operations](https://thenewstack.io/ai-operations/) [CI/CD](https://thenewstack.io/ci-cd/) [Cloud Services](https://thenewstack.io/cloud-services/) [DevOps](https://thenewstack.io/devops/) [Kubernetes](https://thenewstack.io/kubernetes/) [Observability](https://thenewstack.io/observability/) [Operations](https://thenewstack.io/operations/) [Platform Engineering](https://thenewstack.io/platform-engineering/) [GitHub's former CEO launches a developer platform for the age of agentic coding](/thomas-dohmke-interview-entire/) Feb 10th 2026 8:00am, by Frederic Lardinois [Beating context rot in Claude Code with GSD](/beating-context-rot-in-claude-code-with-gsd/) Jan 31st 2026 9:00am, by David Eastman [When AI fails: The new reality of incident management](/when-ai-fails-the-new-reality-of-incident-management/) Jan 30th 2026 9:00am, by Kat Gaines [Prompting vs. RAG vs. fine-tuning: Why it’s not a ladder](/prompting-vs-rag-vs-fine-tuning-why-its-not-a-ladder/) Jan 29th 2026 10:00am, by Ibrahim Kamal [The agentic revolution: A new vision for SREs](/the-agentic-revolution-a-new-vision-for-sres/) Jan 27th 2026 10:00am, by Mandi Walls [Ramp’s Inspect shows closed-loop AI agents are software’s future](/ramps-inspect-shows-closed-loop-ai-agents-are-softwares-future/) Jan 29th 2026 11:00am, by Arjun Iyer [QCon chat: Is agentic AI killing continuous integration?](/qcon-chat-is-agentic-ai-killing-continuous-integration/) Jan 27th 2026 6:00am, by Joab Jackson [Async Rust: Pinning demystified](/async-rust-pinning-demystified/) Jan 26th 2026 11:00am, by Anshul Gupta [A security checklist for your React and Next.js apps](/a-security-checklist-for-your-react-and-next-js-apps/) Jan 26th 2026 7:00am, by Crystal Morin [The head chef model for AI-assisted development](/the-head-chef-model-for-ai-assisted-development/) Jan 22nd 2026 11:00am, by Adi Polak [S3 is the new network: Rethinking data architecture for the cloud era](/tidb-x-open-source-database/) Feb 2nd 2026 4:00am, by Max Liu [How to secure Vertex AI pipelines with Google Cloud tools](/how-to-secure-vertex-ai-pipelines-with-google-cloud-tools/) Jan 27th 2026 9:00am, by Advait Patel [Cloudflare Acquires Team Behind Open Source Framework Astro](/cloudflare-acquires-team-behind-open-source-framework-astro/) Jan 16th 2026 12:45pm, by Loraine Lawson [ScyllaDB's New Cloud Challenges DynamoDB Cost, Performance](/scylladbs-new-cloud-challenges-dynamodb-cost-performance/) Jan 15th 2026 12:05pm, by Joab Jackson [Google Cloud: A Deep Dive into GKE Sandbox for Agents](/google-cloud-a-deep-dive-into-gke-sandbox-for-agents/) Jan 9th 2026 6:00am, by Janakiram MSV [The reason AI agents shouldn’t touch your source code — and what they should do instead](/dynatrace-ai-safety-mechanism/) Feb 12th 2026 4:11pm, by Nick Lucchesi [How to scale GitOps without maxing out](/how-to-scale-gitops-without-hitting-the-argo-ceiling/) Jan 21st 2026 10:30am, by Vicki Walker [Lessons from 2 Years of Integrating AI into Development Workflows](/lessons-from-2-years-of-integrating-ai-into-development-workflows/) Jan 15th 2026 6:00am, by Nishant Ghan [CloudBees CEO: Why Migration Is a Mirage Costing You Millions](/cloudbees-ceo-why-migration-is-a-mirage-costing-you-millions/) Jan 13th 2026 2:00pm, by Michelle Gienow [Forks, Clouds and the New Economics of Open Source Licensing](/forks-clouds-and-the-new-economics-of-open-source-licensing/) Jan 12th 2026 10:49am, by Tobie Morgan Hitchcock [ShareChat hit a billion features per second, then it had to make it 10x cheaper](/scylladb-database-sharechat/) Feb 12th 2026 6:00am, by Cynthia Dunlop [Docker versus Nix: The quest for true reproducibility](/docker-versus-nix-the-quest-for-true-reproducibility/) Feb 7th 2026 10:00am, by B. Cameron Gain [Why Kubernetes is retiring Ingress NGINX](/why-kubernetes-is-retiring-ingress-nginx/) Feb 3rd 2026 8:45am, by Steven J. Vaughan-Nichols [Kubernetes telemetry feature fully compromises clusters](/kubernetes-telemetry-feature-fully-compromises-clusters/) Jan 28th 2026 10:30am, by Joab Jackson [A decade of werf, a software delivery tool for Kubernetes](/a-decade-of-werf-a-software-delivery-tool-for-kubernetes/) Jan 28th 2026 9:00am, by Dmitry Shurupov [Why 40% of AI projects will be canceled by 2027 (and how to stay in the other 60%)](/agentic-ai-connectivity-platform/) Feb 13th 2026 6:00am, by Alex Drag [The reason AI agents shouldn’t touch your source code — and what they should do instead](/dynatrace-ai-safety-mechanism/) Feb 12th 2026 4:11pm, by Nick Lucchesi [Your infrastructure is evolving, but is your operational framework still stuck in the past?](/mature-itops-framework/) Feb 11th 2026 9:00am, by Cristina Dias [The RISC architecture frontier: Is eBPF ready for ARM64 and RISC-V?](/the-risc-architecture-frontier-is-ebpf-ready-for-arm64-and-risc-v/) Feb 10th 2026 11:00am, by B. Cameron Gain [A practical systems engineering guide: Architecting AI-ready infrastructure for the agentic era](/ai-ready-infrastructure/) Feb 9th 2026 2:34pm, by Oladimeji Sowole [OpenClaw is being called a security “Dumpster fire,” but there is a way to stay safe](/deno-sandbox-security-secrets/) Feb 15th 2026 7:00am, by David Eastman [Your RAG System is probably image-blind, but it doesn't have to be](/multimodal-rag-hybrid-search/) Feb 12th 2026 12:00pm, by Tushar Madaan and Kiran Matty [How intelligent orchestration transforms software innovation](/ai-paradox-gitlab/) Feb 12th 2026 8:00am, by Manav Khurana [ShareChat hit a billion features per second, then it had to make it 10x cheaper](/scylladb-database-sharechat/) Feb 12th 2026 6:00am, by Cynthia Dunlop [Your infrastructure is evolving, but is your operational framework still stuck in the past?](/mature-itops-framework/) Feb 11th 2026 9:00am, by Cristina Dias [Durable Execution: Build reliable software in an unreliable world](/temporal-durable-execution-platform/) Feb 2nd 2026 3:23pm, by Charles Humble [The shift left hangover: Why modern platforms are shifting down to cure developer fatigue](/shift-left-hangover-steve-corndell/) Jan 30th 2026 6:22pm, by Steve Corndell [Why the forward-deployed engineer is tech’s hottest job](/why-the-forward-deployed-engineer-is-techs-hottest-job/) Jan 30th 2026 7:00am, by Jennifer Riggins [Caught in the Middle: The New Role of Platform Teams](/caught-in-the-middle-the-new-role-of-platform-teams/) Jan 14th 2026 11:00am, by Yaron Yarimi [Tenants: The Missing Backbone of Modern Developer Platforms](/tenants-the-missing-backbone-of-modern-developer-platforms/) Jan 13th 2026 1:00pm, by Fahmid Kabir [C++](https://thenewstack.io/c/) [Developer tools](https://thenewstack.io/developer-tools/) [Go](https://thenewstack.io/go/) [Java](https://thenewstack.io/java/) [JavaScript](https://thenewstack.io/javascript/) [Programming Languages](https://thenewstack.io/programming-languages/) [Python](https://thenewstack.io/python/) [Rust](https://thenewstack.io/rust/) [TypeScript](https://thenewstack.io/typescript/) [Open source USearch library jumpstarts ScyllaDB vector search](/open-source-usearch-library-jumpstarts-scylladb-vector-search/) Feb 5th 2026 12:00pm, by Jelani Harper [AWS WAF vs. Google Cloud Armor: A Multicloud Security Showdown](/aws-waf-vs-google-cloud-armor-a-multicloud-security-showdown/) Nov 25th 2025 10:00am, by Advait Patel [Goodbye Dashboards: Agents Deliver Answers, Not Just Reports](/goodbye-dashboards-agents-deliver-answers-not-just-reports/) Nov 23rd 2025 9:00am, by Ketan Karkhanis [Rust vs. C++: a Modern Take on Performance and Safety](/rust-vs-c-a-modern-take-on-performance-and-safety/) Oct 22nd 2025 2:00pm, by Zziwa Raymond Ian [Building a Real-Time System Monitor in Rust Terminal](/building-a-real-time-system-monitor-in-rust-terminal/) Oct 15th 2025 7:05am, by Tinega Onchari [OpenClaw is being called a security “Dumpster fire,” but there is a way to stay safe](/deno-sandbox-security-secrets/) Feb 15th 2026 7:00am, by David Eastman [VS Code becomes multi-agent command center for developers](/vs-code-becomes-multi-agent-command-center-for-developers/) Feb 12th 2026 10:38am, by Darryl K. Taft [Chainguard admitted Factory 1.0 was "brittle." Here’s how 2.0 fixes it.](/chainguard-admitted-factory-1-0-was-brittle-heres-how-2-0-fixes-it/) Feb 2nd 2026 1:19pm, by Steven J. Vaughan-Nichols [Beating context rot in Claude Code with GSD](/beating-context-rot-in-claude-code-with-gsd/) Jan 31st 2026 9:00am, by David Eastman [How Claude Cowork helps developers spread the AI knowledge](/how-claude-cowork-helps-developers-spread-the-ai-knowledge/) Jan 24th 2026 8:00am, by David Eastman [Go Experts: 'I Don't Want to Maintain AI-Generated Code'](/go-experts-i-dont-want-to-maintain-ai-generated-code/) Sep 28th 2025 6:00am, by David Cassel [How To Run Kubernetes Commands in Go: Steps and Best Practices](/how-to-run-kubernetes-commands-in-go-steps-and-best-practices/) Jun 27th 2025 8:00am, by Sunny Yadav [Prepare Your Mac for Go Development](/prepare-your-mac-for-go-development/) Apr 12th 2025 7:00am, by Damon M. Garn [Pagoda: A Web Development Starter Kit for Go Programmers](/pagoda-a-web-development-starter-kit-for-go-programmers/) Mar 19th 2025 6:10am, by Loraine Lawson [Microsoft TypeScript Devs Explain Why They Chose Go Over Rust, C#](/microsoft-typescript-devs-explain-why-they-chose-go-over-rust-c/) Mar 18th 2025 7:00am, by David Cassel [62% of enterprises now use Java to power AI apps](/2026-java-ai-apps/) Feb 10th 2026 12:58pm, by Darryl K. Taft [BellSoft bets Java expertise can beat hardened container wave](/bellsoft-bets-java-expertise-can-beat-hardened-container-wave/) Jan 26th 2026 3:00pm, by Darryl K. Taft [Java Developers Get Multiple Paths To Building AI Agents](/java-developers-get-multiple-paths-to-building-ai-agents/) Dec 26th 2025 7:02am, by Darryl K. Taft [Your Enterprise AI Strategy Must Start With Java, Not Python](/your-enterprise-ai-strategy-must-start-with-java-not-python/) Dec 22nd 2025 1:00pm, by Michael Coté [Why Bloomberg Chose Vendor-Neutral Java Over Big Tech](/why-bloomberg-chose-vendor-neutral-java-over-big-tech/) Oct 2nd 2025 5:00pm, by Darryl K. Taft [Arcjet reaches v1.0, promises stable security for JavaScript apps](/arcjet-reaches-v1-0-promises-stable-security-for-javascript-apps/) Feb 14th 2026 7:00am, by Darryl K. Taft [How WebAssembly and Web Workers prevent UI freezes](/how-webassembly-and-web-workers-prevent-ui-freezes/) Feb 7th 2026 9:00am, by Jessica Wachtel [Mastra empowers web devs to build AI agents in TypeScript](/mastra-empowers-web-devs-to-build-ai-agents-in-typescript/) Jan 28th 2026 11:00am, by Loraine Lawson [A security checklist for your React and Next.js apps](/a-security-checklist-for-your-react-and-next-js-apps/) Jan 26th 2026 7:00am, by Crystal Morin [Distributed apps platform Aspire supports JavaScript, Python](/distributed-apps-platform-aspire-supports-javascript-python/) Jan 24th 2026 9:00am, by Loraine Lawson [Statistical language R is making a comeback against Python](/statistical-language-r-is-making-a-comeback-against-python/) Feb 12th 2026 2:57pm, by Darryl K. Taft [62% of enterprises now use Java to power AI apps](/2026-java-ai-apps/) Feb 10th 2026 12:58pm, by Darryl K. Taft [Memory-Safe Jule language emerges as C/C++ alternative](/jule-open-source-programming-language/) Feb 7th 2026 8:00am, by Darryl K. Taft [The 'weird' things that happened when Clickhouse replaced C++ with Rust](/the-weird-things-that-happened-when-clickhouse-replaced-c-with-rust/) Feb 4th 2026 7:26am, by B. Cameron Gain [Async Rust: Pinning demystified](/async-rust-pinning-demystified/) Jan 26th 2026 11:00am, by Anshul Gupta [Statistical language R is making a comeback against Python](/statistical-language-r-is-making-a-comeback-against-python/) Feb 12th 2026 2:57pm, by Darryl K. Taft [Arcjet's Python SDK Embeds Security in Code](/arcjets-python-sdk-embeds-security-in-code/) Jan 16th 2026 2:00pm, by Darryl K. Taft [2025: The Year of the Return of the Ada Programming Language?](/2025-the-year-of-the-return-of-the-ada-programming-language/) Jan 14th 2026 4:00pm, by Darryl K. Taft [Experts Hail Anthropic's $1.5M Python Security Commitment](/experts-hail-anthropics-1-5m-python-security-commitment/) Jan 14th 2026 3:00pm, by Darryl K. Taft [Python: What's Coming in 2026](/python-whats-coming-in-2026/) Jan 11th 2026 6:00am, by David Cassel [Open source USearch library jumpstarts ScyllaDB vector search](/open-source-usearch-library-jumpstarts-scylladb-vector-search/) Feb 5th 2026 12:00pm, by Jelani Harper [The 'weird' things that happened when Clickhouse replaced C++ with Rust](/the-weird-things-that-happened-when-clickhouse-replaced-c-with-rust/) Feb 4th 2026 7:26am, by B. Cameron Gain [Async Rust: Pinning demystified](/async-rust-pinning-demystified/) Jan 26th 2026 11:00am, by Anshul Gupta [Distributed apps platform Aspire supports JavaScript, Python](/distributed-apps-platform-aspire-supports-javascript-python/) Jan 24th 2026 9:00am, by Loraine Lawson [How Rust does async differently (and why it matters)](/how-rust-does-async-differently-and-why-it-matters/) Jan 21st 2026 6:00am, by Anshul Gupta [Mastra empowers web devs to build AI agents in TypeScript](/mastra-empowers-web-devs-to-build-ai-agents-in-typescript/) Jan 28th 2026 11:00am, by Loraine Lawson [Inferno Vet Creates Frontend Framework Built With AI in Mind](/inferno-vet-creates-frontend-framework-built-with-ai-in-mind/) Dec 10th 2025 11:00am, by Loraine Lawson [JavaScript Utility Library Lodash Changing Governance Model](/javascript-utility-library-lodash-changing-governance-model/) Nov 1st 2025 7:00am, by Loraine Lawson [Microsoft TypeScript Devs Explain Why They Chose Go Over Rust, C#](/microsoft-typescript-devs-explain-why-they-chose-go-over-rust-c/) Mar 18th 2025 7:00am, by David Cassel [Go Power: Microsoft's Bold Bet on Faster TypeScript Tools](/go-power-microsofts-bold-bet-on-faster-typescript-tools/) Mar 12th 2025 1:00pm, by Darryl K. Taft and Loraine Lawson 2025-07-11 09:00:31 What Everyone Gets Wrong About CVE Mitigation sponsor-chainguard,sponsored-post-contributed, [Operations](/category/operations/) / [Security](/category/security/) # What Everyone Gets Wrong About CVE Mitigation In many industries, robust CVE management is now required for growth. Strong security postures can open the door to new revenue channels. Jul 11th, 2025 9:00am by [Kim Lewandowski](https://thenewstack.io/author/kim-lewandowski/) Image from lumerb on Shutterstock. [Chainguard](https://www.chainguard.dev/?utm_content=sponsor+disclosure) sponsored this post. Common vulnerabilities and exposures (CVEs) used to be viewed solely as a technical risk, but today, they’ve become something more: a bottomless pit of [operational and financial costs](https://thenewstack.io/cloud-native-companies-are-overspending-on-cve-management/). Log4Shell ([CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228)), one of the most critical vulnerabilities of the decade, and [Ingress-NGINX remote code execution CVEs](https://www.chainguard.dev/unchained/ingress-nginx-controller-nightmare-on-cve-street) have highlighted the risks that CVEs pose. Managing them in [containerized environments](https://thenewstack.io/containers/) is incredibly difficult, time-consuming and expensive. ## CVE Management Is Snowballing – And So Are the Costs Vulnerabilities are multiplying faster than teams can patch them — and the gap is only widening. In 2024 alone, over 40,000 CVEs were [published](https://www.cve.org/about/Metrics), up from 29,000 in 2023. CVE costs can manifest as missed compliance deadlines, reallocated engineering cycles, delayed product releases and lost business opportunities — serious issues that can have long-lasting impacts on an organization. Today, the average data breach costs [$4.9 million](https://www.ibm.com/reports/data-breach). Yet, this figure doesn’t capture the silent costs of *avoiding* breaches, or the [labor-intensive process of triaging and patching CVEs](https://thenewstack.io/five-myths-about-cves/) across an organization’s build environments. A [2025 Chainguard report](https://get.chainguard.dev/cost-of-cves-2025-report) analyzing CVE-related costs found that for Fortune 500 organizations and startups alike, CVEs are no longer just a security concern; they’ve become a massive economic burden. As organizations grow, so does the amount of software in production that needs to be secured, the number of compliance requirements that need to be met and the amount of scrutiny from customers. However, engineering teams are extremely bogged down by the vast number of CVEs they need to manage, taking away precious time that could be focused on innovation and revenue-generating work. * Enterprise organizations ($10B+) reported average annual savings of $44 million when remediating CVEs in their build environments, with a majority of that value derived from reduced risk exposure and faster innovation. * Early-stage companies (<$100M) are unlocking $6.6 million in annual value by reducing their CVE workload. These gains stem largely from accelerating time to market and reducing engineering time spent on patching and compliance. * Mid-market companies ($500M–$1B) saved an average of $2.13 million annually on CVE remediation alone. Without mature automation or golden image pipelines, many of these organizations would have lost valuable engineering cycles to manual patching and compliance prep. ## Security Fuels Innovation Across Industries The report illustrates return on investment across five major industries. While the specific drivers vary, the pattern is consistent: When security friction is eliminated, organizations build faster, safer and with fewer surprises. * Industry-specific findings reinforce this trend: Consumer and commerce companies saw the largest CVE remediation savings, averaging $3.1 million annually. * Healthcare organizations saved an annual average of $1.89 million. * Financial services saved an annual average of $1.16 million. * Tech companies saved $1.04 million. Reasons for these cost savings may differ. In financial services, for example, CVEs can carry audit and compliance risks that require detailed reporting and collaboration. Healthcare organizations often deal with legacy infrastructure and regulatory requirements (such as HIPAA) that make CVE remediation challenging. No matter which industry, reducing the amount of time engineering teams spend on manually patching, testing and redeploying software is critical. ## Compliance as a Revenue Accelerator In many industries, robust CVE management is now required for growth, not just risk mitigation. Strong security postures open the door to new revenue channels, especially when selling into regulated markets. When it comes to CVEs and continuous monitoring, meeting compliance requirements can be daunting and confusing. Compliance isn’t just achieved; rather, it is a continuous maintenance process. Compliance frameworks might require additional standards, such as Federal Information Processing Standards (FIPS), Federal Risk and Authorization Management Program (FedRAMP), Security Technical Implementation Guides (STIGs) and more that add an extra layer of complexity and time spent. The findings are clear. Telecommunications and infrastructure companies reported an average of $3 million in new revenue annually by improving their container security enough to qualify for security-sensitive contracts. Healthcare organizations averaged $7.3 million in new revenue, often driven by unlocking expansion into compliance-heavy markets. Growth-stage tech firms unlocked $12 million in annual value, much of it tied to being able to pass enterprise buyer scrutiny earlier in the sales cycle. ## It’s Time To Go Beyond Shifting Left The industry has long championed “shifting security left,” or embedding checks earlier in the pipeline to ensure security measures are incorporated throughout the entire software development life cycle. However, as CVE fatigue worsens, many teams are realizing they need to “start left.” That means: * Using hardened, minimal container images by default * Automating CVE triage and patching through reproducible builds * Investing in secure-by-default infrastructure that makes vulnerability management invisible to most developers CVEs have always carried technical and compliance risks. However, this analysis reveals that unmanaged vulnerabilities quietly derail velocity, inflate operational costs and delay growth. Engineering leaders must start treating CVE management as a productivity and business issue, not just a security requirement. For teams aiming to move fast and scale securely, building on a secure foundation is essential. Chainguard is the secure foundation for software development and deployment. By providing guarded open source software, built from source and updated continuously, Chainguard helps organizations eliminate threats in their software supply chains. Learn More The latest from Chainguard TRENDING STORIES [YOUTUBE.COM/THENEWSTACK Tech moves fast, don't miss an episode. Subscribe to our YouTube channel to stream all our podcasts, interviews, demos, and more.](https://youtube.com/thenewstack?sub_confirmation=1) [Kim is a Founder and Head of Product at Chainguard. She started her career in the security space as an engineer working for Lawrence Livermore Labs, and most recently worked for Google. She launched a number of cloud enterprise products... Read more from Kim Lewandowski](https://thenewstack.io/author/kim-lewandowski/) [Chainguard](https://www.chainguard.dev/?utm_content=sponsor+disclosure) sponsored this post. SHARE THIS STORY TRENDING STORIES SHARE THIS STORY TRENDING STORIES TNS DAILY NEWSLETTER Receive a free roundup of the most recent TNS articles in your inbox each day. The New Stack does not sell your information or share it with unaffiliated third parties. By continuing, you agree to our [Terms of Use](/terms-of-use/) and [Privacy Policy](/privacy-policy/).